Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3138362e372e302e302f31362d3234203d3e2036343030.roa
File:                     3138362e372e302e302f31362d3234203d3e2036343030.roa (raw, json)
Hash identifier:          deyFQtG7gmTCHzc+Z+zbD6Mk3tANPnEufFQxb4+dOhM=
Subject key identifier:   50:EC:F1:72:E0:3C:9D:3A:76:34:2E:D6:63:F3:B0:96:24:D7:A3:98
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       16922F8F76E05D7DD87017C5EC5A56431B02F6C3
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3138362e372e302e302f31362d3234203d3e2036343030.roa
Signing time:             Tue 05 Aug 2025 14:34:45 +0000
ROA not before:           Tue 05 Aug 2025 14:29:45 +0000
ROA not after:            Tue 04 Aug 2026 14:34:45 +0000
asID:                     6400
IP address blocks:        186.7.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:92:2f:8f:76:e0:5d:7d:d8:70:17:c5:ec:5a:56:43:1b:02:f6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Aug  5 14:29:45 2025 GMT
            Not After : Aug  4 14:34:45 2026 GMT
        Subject: CN=50ECF172E03C9D3A76342ED663F3B09624D7A398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:7e:16:47:8a:46:e8:30:85:56:9e:48:74:
                    27:1d:47:a1:cf:77:50:eb:c2:2c:9c:59:8b:8e:db:
                    55:fa:a0:2c:b7:23:e0:34:69:6a:8f:24:6c:7c:cf:
                    d6:f9:6c:4f:c0:13:3d:bd:80:97:29:a0:46:da:88:
                    d4:b1:26:28:cd:3b:cc:f9:df:e9:9b:dc:5f:e5:9c:
                    16:a8:07:b4:a9:3d:df:b1:51:c6:61:34:97:fd:6e:
                    f1:bf:4a:75:8c:80:1c:5c:69:8a:36:22:bb:50:5f:
                    c6:0d:78:54:ed:58:ac:d5:fc:c5:2e:28:41:55:c8:
                    bd:5a:b9:ae:af:67:b7:3a:17:e7:a8:8d:7c:e2:ab:
                    97:69:6b:d3:32:da:d4:9f:33:46:d4:f0:aa:9e:f6:
                    cc:96:f5:3d:73:1b:64:cc:5b:ae:9e:57:53:62:fd:
                    d1:a3:a4:f2:f3:47:55:1e:a6:57:9f:4c:ea:60:6b:
                    cb:88:bd:29:0b:b3:72:bf:67:c0:31:69:fd:4f:60:
                    47:58:1d:cb:50:a2:11:3c:39:e0:45:30:1a:89:c7:
                    4e:0a:45:6b:9e:15:fd:7f:ba:90:f8:af:70:83:d3:
                    4b:88:c5:28:6c:ee:7a:dc:72:4f:80:29:c1:68:a4:
                    ee:a3:dd:c5:89:d1:8e:36:55:ac:39:ac:eb:00:ad:
                    b0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EC:F1:72:E0:3C:9D:3A:76:34:2E:D6:63:F3:B0:96:24:D7:A3:98
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3138362e372e302e302f31362d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.7.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:87:3d:0e:65:a8:02:67:ef:24:06:a4:4a:8e:76:26:4f:4a:
         18:af:20:36:b0:cd:70:67:60:80:66:d4:72:b5:21:d8:63:bf:
         d1:76:c4:a5:04:13:b3:57:78:07:ab:f8:1d:61:43:b4:ec:19:
         4b:3e:bf:fc:d0:d3:50:4c:0f:92:56:5f:97:f2:fc:ef:fd:d8:
         43:02:82:df:da:ed:b0:5a:a7:62:52:9d:1e:1b:f0:dc:95:f0:
         d3:38:87:d6:e6:7a:fb:2e:00:e4:33:70:f5:c1:25:6f:44:d9:
         cc:f2:19:c9:b5:1b:74:45:d7:bd:65:9d:44:6b:a1:99:0d:53:
         da:eb:3b:e7:f0:c2:df:29:43:05:51:6e:07:00:e0:80:c4:96:
         a0:22:a5:51:69:dd:cd:00:6b:05:78:d0:8d:31:dc:fd:ba:15:
         06:b0:38:a9:c2:dd:d6:a6:1d:6d:47:30:6d:57:59:e3:a0:fd:
         28:8a:6d:7a:20:4e:55:b4:e0:ec:a6:0e:7f:2d:e8:e0:57:34:
         64:00:1b:42:81:74:6b:12:f9:99:e9:e0:8b:26:11:57:fa:98:
         1d:13:76:39:dd:0f:4b:e6:2f:d0:fd:4c:3b:56:de:39:39:c6:
         45:9e:a1:87:83:d5:c5:d5:c7:01:c1:14:9b:04:1c:ae:cd:2e:
         15:d6:f4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:34:29 2025 by rpki-client